Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: bA0Rb4BSeyFxE6AD38i38p0NbFfWDcRM0VkGPghdXAQ=
Subject key identifier: 24:A6:55:AC:2A:CA:66:A0:7D:41:04:E4:F6:7B:EB:85:2F:30:7C:59
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 019748FA11AF748555D93951A048A28756AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 02D4
Signing time: Sat 07 Jun 2025 06:00:37 +0000
Manifest this update: Sat 07 Jun 2025 06:00:37 +0000
Manifest next update: Sun 08 Jun 2025 06:00:37 +0000
Files and hashes: 1: 5TxBRMul-Sk6vrxAy-O3Gig1UHg.roa (hash: eQW3KPMxFJcTn3nfO5KDUYdR77aYysAZcOPu9j2QK1w=)
2: NnS9tE0Wd3GJX8d4rDN6hefth0k.roa (hash: iMULd1rU9nLxXdG6/iod6VTsBhibbUWJ3DwkFA8v85s=)
3: R5EoUABcKiwLg06w_OxlkJfMqUk.roa (hash: irt2J6S0P6bVoeLD1I6fHpK1oay2SiSe0bMOlV1dUxk=)
4: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: /gdFDOTVij7jlc83OK8Pb/xl2TES4WE5nxKNNsW/uG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:11:af:74:85:55:d9:39:51:a0:48:a2:87:56:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Jun 7 06:00:37 2025 GMT
Not After : Jun 8 06:00:37 2025 GMT
Subject: CN=24a655ac2aca66a07d4104e4f67beb852f307c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:b3:87:b3:b1:19:98:70:60:35:ce:df:94:
31:85:88:91:08:59:d7:1e:ee:37:15:b5:39:e0:42:
ee:6f:55:79:0a:c2:10:86:ef:5f:57:9e:cf:3b:1d:
c4:bb:86:bc:46:15:d9:3b:4b:26:d2:df:3c:7e:56:
a3:5a:b7:80:27:18:b8:74:20:6e:5c:1d:24:9e:99:
98:82:4c:99:84:0e:f1:d7:02:83:5d:aa:73:fc:0a:
b1:3f:23:c2:b7:f7:cd:ff:ea:5e:70:12:93:43:3c:
96:f8:ca:54:84:20:cf:c2:7a:2e:b7:16:0c:78:56:
c2:0e:a8:4f:79:17:25:ac:15:b2:c9:bd:98:a2:4c:
8d:0b:77:18:4a:ac:a2:ae:94:c6:cd:87:15:e8:0c:
0d:c1:5d:46:2c:a5:39:c1:e1:c4:19:16:ed:c4:37:
ae:ec:79:75:78:a0:ee:0d:23:b9:23:b4:cf:b3:5b:
72:56:71:5e:65:27:bb:24:d6:0d:fd:2a:38:b3:83:
a6:0c:e9:f5:26:2a:fd:c5:57:5c:34:d0:b0:fc:dd:
5d:30:d2:b8:ea:8f:50:30:2e:14:aa:09:24:27:0f:
e6:cd:02:31:b6:4b:10:75:4a:36:a0:70:d9:dd:eb:
7b:f3:cd:a9:e5:1b:d1:a1:63:9f:b4:02:09:b8:0f:
cb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A6:55:AC:2A:CA:66:A0:7D:41:04:E4:F6:7B:EB:85:2F:30:7C:59
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5e:fb:63:84:0d:03:ae:55:ca:32:4a:71:9f:83:85:7e:9b:
f7:1b:5c:09:a1:b2:7f:a7:fd:c7:ec:6e:13:20:c2:a3:d0:71:
cc:f6:cf:81:1c:d5:9c:69:57:39:57:a7:04:8f:03:10:11:c0:
04:d6:c9:56:31:cf:be:81:81:02:16:b3:b5:79:a6:83:71:91:
3a:87:7b:ad:33:9b:96:b7:bb:c5:0c:1b:55:c9:d0:9e:a7:56:
27:8c:69:90:88:2d:4a:84:08:ae:09:fe:b4:10:22:eb:87:f0:
71:79:6c:94:dc:bf:85:06:20:3b:31:06:61:2b:be:e2:b5:68:
33:1f:ff:72:f4:54:90:51:d6:d5:91:0d:75:ca:c0:4d:c7:ae:
b2:03:db:40:16:04:2a:94:91:8f:02:fb:7b:cb:f3:72:87:c6:
ec:a5:e7:04:cf:1f:44:54:e0:66:5c:a4:37:51:c0:1b:0e:98:
e4:5a:c9:5e:6f:fd:8f:2d:bc:ba:c0:8d:a4:90:d6:e5:9b:ef:
73:13:ad:d7:fc:83:72:f0:68:3b:ad:d9:9b:d3:48:6c:c8:1d:
e2:9a:e5:a4:76:a0:2d:66:df:0b:98:09:57:3d:18:2f:a7:3e:
a1:47:28:a3:42:e6:37:1c:50:ff:02:5c:67:c5:06:66:35:de:
75:73:64:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:23 2025 by rpki-client